Registry Question

Archived from groups: microsoft.public.win2000.security (More info?)

Hello,

I'm using Cisco Security Agent to monitor the boxes on my domain. Once of
the messages received was the following. Anyone knows why a wwindows box
will do these functions?

The process 'C:\WINNT\system32\lsass.exe' (as user NT AUTHORITY\SYSTEM)
modified the registry key '\REGISTRY\MACHINE\SAM\SAM\Domains\Account' and
value 'F'.

Thanks

GX